CVE-2025-59609: Unknown Vulnerability in Android Package

:unknown: Updated 04 Jun 2026

Summary

01/06/2026
Yes i
Moderate
Not published

CVE-2025-59609: ... Affects :unknown: versions >= SoCVersion:0, < SoCVersion:2026-06-05. Fixed in SoCVersion:2026-06-05. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Penetration testing for web, API and mobile Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

The affected package is part of the Android ecosystem, which is widely used for mobile applications. Android provides a robust platform for developers, enabling them to create applications that run on a variety of devices. However, vulnerabilities within this ecosystem can pose significant risks to users and developers alike, potentially leading to data breaches or unauthorized access.

Vulnerability Detail

This vulnerability, identified as CVE-2025-59609, originates from an unknown source within the Android package. It has been classified with a moderate severity level, indicating that while it may not be critical, it still poses a risk that could be exploited by malicious actors. The vulnerability could lead to unauthorized access or manipulation of sensitive data, depending on how the affected package is utilized within applications.

How To Fix

Minimum fixed version

SoCVersion:2026-06-05

This is the first release that contains the fix.

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Workaround

Currently, no specific workarounds have been provided for this vulnerability. It is recommended to monitor the situation and apply the patch as soon as it becomes available.

Conclusion

In summary, CVE-2025-59609 is a moderate severity vulnerability in an unknown Android package that could lead to unauthorized access. Users are advised to update to the patched version available on June 5, 2026, and monitor for any further developments regarding this issue.

See every vulnerability recorded for :unknown: →

Share this vulnerability

FAQ

CVE-2025-59609 is a moderate severity vulnerability found in an unknown package within the Android ecosystem, which could lead to unauthorized access or data manipulation.

You can use Vulert, a tool that monitors and alerts for open-source vulnerabilities in real-time. By using the Vulert playground, you can check if your application is affected without requiring any installation.

If your application is affected, it is crucial to update the package to the fixed version available as of June 5, 2026, to mitigate the risk.

Currently, no specific workarounds are available. The best course of action is to apply the patch once it is released.

More information can be found in the vulnerability database or by visiting the source link provided in the vulnerability details.

Related vulnerabilities

Recent vulnerabilities recorded for :unknown:.

How To Fix

Minimum fixed version

SoCVersion:2026-06-05

This is the first release that contains the fix.

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback